Skip to content
OpenAdvisories

Archive

25 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /25 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-27577 Public exploit EPSS 11%

    n8n: Expression Sandbox Escape Leads to RCE

    n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, additional exploits in the expression evaluation of n8n have been identified and patched following CVE-2025-68613. An authenticated user with permission to crea…

    n8n-io n8n n8n npm
  • Critical 9.4
    CVE-2026-27495 Public exploit

    n8n has a Sandbox Escape in its JavaScript Task Runner

    n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could exploit a vulnerability in the JavaScript Task Runner sandbox to execute arbitrary cod…

    n8n-io n8n n8n npm
  • Critical 9.2
    CVE-2026-0542 Public exploit

    Remote Code Execution in ServiceNow AI Platform

    ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow Sandbox.    ServiceNow a…

    ServiceNow ServiceNow AI Platform
  • Critical 9.8
    CVE-2026-21902 Public exploit EPSS 18%

    Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root

    An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated, network-based attacker to execute code as root. The On-Box Anomaly d…

    Juniper Networks Junos OS Evolved Network devices
  • Critical 9.2
    CVE-2026-27739 Public exploit

    Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline

    The Angular SSR is a server-rise rendering tool for Angular applications. Versions prior to 21.2.0-rc.1, 21.1.5, 20.3.17, and 19.2.21 have a Server-Side Request Forgery (SSRF) vulnerability in the Angular SSR request handling pipeline. The vulnerability exist…

    angular angular-cli @nguniversal/express-engine @nguniversal/common npm
  • Critical 10.0
    CVE-2026-20127 Exploited Public exploit EPSS 88%

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remo…

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Feb 25, 2026
  • Critical 9.1
    CVE-2025-1242 Public exploit

    Administrative Credentials Can Be Extracted Through Gardyn API Responses

    The administrative credentials can be extracted through application API responses, mobile application reverse engineering, and device firmware reverse engineering. The exposure may result in an attacker gaining full administrative access to the Gardyn IoT Hub…

    Gardyn Home Kit Home Kit Cloud API Home Kit Mobile Application
  • Critical 9.8
    CVE-2026-2624 Public exploit

    Authentication Bypass in ePati's Antikor NGFW

    Missing Authentication for Critical Function vulnerability in ePati Cyber ​​Security Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass. This issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2…

    ePati Cyber ​​Security Technologies Antikor Next Generation Firewall (NGFW)
  • Critical 9.9
    CVE-2025-62878 Public exploit

    Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern

    A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining access to unintended directories.

    SUSE Rancher github.com/rancher/local-path-provisioner Go
  • Critical 10.0
    CVE-2026-27597 Public exploit

    @enclave-vm/core is vulnerable to Sandbox Escape

    Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to version 2.11.1, it is possible to escape the security boundraries set by `@enclave-vm/core`, which can be used to achieve remote code execution (RCE). The issue has bee…

    agentfront enclave @enclave-vm/core npm
  • Critical 9.8
    CVE-2026-27641 Public exploit

    Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection

    Flask-Reuploaded provides file uploads for Flask. A critical path traversal and extension bypass vulnerability in versions prior to 1.5.0 allows remote attackers to achieve arbitrary file write and remote code execution through Server-Side Template Injection …

    jugmac00 flask-reuploaded flask-reuploaded PyPI
  • Critical 10.0
    CVE-2026-27626 Public exploit

    OliveTin vulnerable to OS Command Injection via `password` argument type and webhook JSON extraction bypasses shell safety checks

    OliveTin gives access to predefined shell commands from a web interface. In versions up to and including 3000.10.0, OliveTin's shell mode safety check (`checkShellArgumentSafety`) blocks several dangerous argument types but not `password`. A user supplying a …

    OliveTin OliveTin github.com/OliveTin/OliveTin Go
  • Critical 10.0
    CVE-2026-24849 Public exploit

    OpenEMR Arbitrary File Read Vulnerability

    OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 7.0.4, the `disposeDocument()` method in `EtherFaxActions.php` allows authenticated users to read arbitrary files from the server filesys…

    Open-Emr openemr